StackRadarChart IndexLive demo

CVE-2021-41103

Medium

Advisory

Published 4 Oct 2021In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.005; 43rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 113; of 17,781 indexed, latest versions
Container images: 102; deployed by those charts
Fix available: 1 of 1; affected package

Insufficiently restricted permissions on plugin directories

Carried by container images the latest versions of 113 of 17,781 indexed charts deploy, on 102 images.

Affected package	Affected versions	Fixed in	Images
github.com/containerd/containerdgolang	v1.3.0, v1.3.2, v1.3.3, v1.3.4+10 more	1.4.11, 1.5.7	102

OSV records: GHSA-c2h3-6mxw-7mvq
Also known as: GO-2022-0938

Charts affected

113 by stars

Chart

Latest

Affected images

Radar Score

cost-analyzerstatcan

1 of 9 See more

cost-analyzer statcan 1.82.2

1 of the 9 container images this version deploys carry CVE-2021-41103.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.22.2	f7ffebdd428b	github.com/containerd/containerd@v1.3.4	1.4.11

Open the chart page →

16,506

taalhuizen-servicetaalhuizen-service

1 of 3 See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-41103.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/taalhuizen-service-php :latest	04f1b7f0d573	github.com/containerd/containerd@v1.3.2	1.4.11

Open the chart page →

7,480

temporaltemporal

1 of 13 See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2021-41103.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	github.com/containerd/containerd@v1.5.4	1.5.7

Open the chart page →

21,005

monitoringthl-charts

1 of 10 See more

monitoring thl-charts 0.1.1

1 of the 10 container images this version deploys carry CVE-2021-41103.

Container image	Digest	Package	Fixed in
grafana/promtail :2.4.2	626900031c4e	github.com/containerd/containerd@v1.5.4	1.5.7

Open the chart page →

18,908

trouw-servicetrouw-service

1 of 3 See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-41103.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/trouw-service-php :latest	f745e2870692	github.com/containerd/containerd@v1.3.2	1.4.11

Open the chart page →

7,510

verhuis-serviceverhuis-service

1 of 3 See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-41103.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verhuis-service-php :latest	66bbaf95a123	github.com/containerd/containerd@v1.3.2	1.4.11

Open the chart page →

7,510

verzoekconversieserviceverzoekconversieservice

1 of 3 See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-41103.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekconversieservice-php :latest	e918014fb8d3	github.com/containerd/containerd@v1.3.2	1.4.11

Open the chart page →

7,528

verzoekregistratiecomponentverzoekregistratiecomponent

1 of 4 See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-41103.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php :latest	c4f6c03af5d3	github.com/containerd/containerd@v1.3.2	1.4.11

Open the chart page →

7,429

verzoektypecatalogusverzoektypecatalogus

1 of 4 See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-41103.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoektypecatalogus-php :latest	64f5eb7a398b	github.com/containerd/containerd@v1.3.2	1.4.11

Open the chart page →

7,429

wazuhwazuh-helm-eks

1 of 6 See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2021-41103.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.14.4	5a065930682d	github.com/containerd/containerd@v1.3.3	1.4.11

Open the chart page →

5,484

wazuh-manager-filebeatwazuh-manager-filebeat

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2021-41103.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	github.com/containerd/containerd@v1.3.3	1.4.11

Open the chart page →

11,119

webresourcecataloguswebresourcecatalogus

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-41103.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	github.com/containerd/containerd@v1.3.2	1.4.11

Open the chart page →

7,552

traefikwenerme

1 of 1 See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2021-41103.

Container image	Digest	Package	Fixed in
library/traefik :2.2.8	f5af5a5ce17f	github.com/containerd/containerd@v1.3.2	1.4.11

Open the chart page →

3,369

Container images carrying it

102 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	github.com/containerd/containerd@v1.5.1	1.5.7	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	github.com/containerd/containerd@v1.4.3	1.4.11	1